CVE-2023-39520CWE-269

Cryptomator vulnerable to Local Elevation of Privileges

Medium · published August 7, 2023

CVSS v3.1
5.5
EPSS
0%
Percentile
24.8
In the wild
Unconfirmed
What it is

Cryptomator encrypts data being stored on cloud infrastructure. The MSI installer provided on the homepage for Cryptomator version 1.9.2 allows local privilege escalation for low privileged users, via the `repair` function. The problem occurs as the repair function of the MSI is spawning an SYSTEM Powershell without the `-NoProfile` parameter. Therefore the profile of the user starting the repair will be loaded. Version 1.9.3 contains a fix for this issue. Adding a `-NoProfile` to the powershell is a possible workaround.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00330 · 24.8th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2023-08-07T19:35Z
EPSS history
Timeline
  • 07 AUG 19:35Z
    Cryptomator vulnerable to Local Elevation of Privileges
    cvelistv5